Privacy Policy

SODEXO builds strong and lasting relationships with its clients, partners, consumers, and employees, based on mutual trust. Ensuring the security and confidentiality of their personal data is an absolute priority for SODEXO.

SODEXO complies with all French and European regulatory and legislative provisions relating to the protection of personal data.

SODEXO applies an extremely strict privacy policy to guarantee the protection of the personal data of users of its websites and other applications :

Each user remains in control of their data. Personal data is processed in a transparent, confidential, and secure manner.
SODEXO is committed to a continuous approach to protecting its users’ data, in compliance with the amended French Data Protection Act of 6 January 1978 (hereinafter the “French Data Protection Act”) and the General Data Protection Regulation (EU) of 27 April 2016 (hereinafter the “GDPR”).
SODEXO has a dedicated team responsible for the protection of personal data, consisting of a Group Data Protection Officer declared to the CNIL and a network of dedicated contact points for personal data protection.

Purpose of this Policy

SODEXO places great importance on the protection of your Personal Data.

We have developed this policy to inform you of the conditions under which we collect, process, use, and protect your Personal Data. Please read it carefully to understand which categories of Personal Data are collected and processed, how we use such data, and with whom it may be shared. This policy also describes your rights and explains how you can contact us to exercise those rights or to ask any questions you may have regarding your Personal Data.

This Privacy Policy may be amended, supplemented, or updated in particular to comply with any legal, regulatory, case law, or technical developments. However, your Personal Data will always be processed in accordance with the policy in force at the time the data was collected, unless a mandatory legal requirement provides otherwise and applies retroactively.

This policy forms an integral part of the Website’s General Terms and Conditions of Use.

Identity and contact details of the data controller

The controller responsible for the processing of Personal Data is: Lenôtre SA, company number B 662 054 543, whose registered office is located at 40 rue Pierre Curie, BP 6 – 78375 Plaisir Cedex, France (Telephone: +33 (0)1 30 81 46 46), represented by Ms. Nathalie SZABO.

Definitions

« Personal Data » means any information relating to an identified or identifiable natural person, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to that person.

« we » or « our » refers to Lenôtre (hereinafter« Lenôtre »).

« you » refers to any user / visitor of the Website.

« Website »refers to the Lenôtre École website available at the following address : http://www.lenotre.fr

Collection and origin of personal data

We may collect your Personal Data either directly (in particular through the data collection forms available on our website) or indirectly (notably through our service providers and/or the technologies used on our website).Where required, we undertake to obtain your consent and/or to allow you to object to the use of your data for certain purposes.

In all cases, you will be informed of the purposes for which your data is collected through the various online data collection forms and through the Cookie Management Policy.

Types of personal data we collect and use

We may collect and process, in particular, the following types of Personal Data:

-information that you provide by completing forms on the Website (for example, for registration purposes, participation in surveys, marketing purposes, etc.) ;
-information that you provide for authentication purposes;
-information provided through posts, comments, or other content that you publish on the Website.

– les informations que vous fournissez à des fins d’authentification ;
– les informations que vous fournissez à des fins de gestion d’une commande ou d’un service ;
– par le biais des « posts », des commentaires ou d’autres contenus que vous affichez sur le Site.

Personal Data identified by an asterisk (*) in the data collection forms is mandatory, as it is required in order to process the request submitted. If such mandatory information is not provided, the relevant request cannot be processed.

Personal data we collect automatically

We automatically collect certain information when you browse the Website in order to personalize and improve your user experience. This information is collected through various means, including the following :

Cookies

A « cookie » is a small information file sent to your browser when you visit our Website and stored on your device. This file contains information such as the domain name, Internet service provider, operating system, as well as the date and time of the user’s access. Cookies do not in any way damage your device.

Cookies are not used to identify an individual visiting our Website. In particular, they allow us to determine your geographical location and display language in order to enhance your browsing experience. They also enable us to process information relating to your visit to the Website, such as the pages viewed and searches carried out, in order to improve the Website’s content, track your areas of interest, and offer content that is most relevant to you.

If you do not wish to receive cookies from our Website, you may configure your browser settings accordingly. As each browser has different configuration options, instructions are provided in the help menu of your browser, which will explain how to modify your cookie preferences.

However, we recommend that you do not disable our cookies. Please note that if you block, disable, or reject our cookies, certain pages of the Website may not display correctly, or you may no longer be able to use some of the services offered. In such cases, we accept no liability for any consequences related to the degraded functioning of our services resulting from our inability to store or access cookies necessary for their operation that you have refused or deleted.

Finally, by clicking on the icons dedicated to social networks such as Twitter, Facebook, LinkedIn, etc., which may appear on our Website, and if you have accepted the use of cookies by continuing to browse the Website, the relevant social networks may also place cookies on your devices (computer, tablet, mobile phone). These types of cookies are only placed on your devices if you consent to them by continuing to browse the Website. You may withdraw your consent at any time regarding the placement of such cookies by these social networks.

For further information, please refer to our Cookie Management Policy.

IP Addresses

An IP address is a unique identifier that certain electronic devices use to identify themselves and communicate with one another on the Internet. When you browse the Website, we may use the IP address of the device you use to connect to it. We use this information to determine the general physical location of the device and to understand the geographical region from which visitors to the Website originate.

Statistics

The Website uses Google Analytics to generate statistical reports. These reports indicate, for example, how many users have visited the Website, which pages have been viewed, and the geographical area from which the Website’s users originate. The information collected through statistical tools may include, for example, your IP address, the website from which you accessed our Website, and the type of device you are using.

Your IP address is masked within our systems and will only be used when necessary to resolve technical issues, administer the Website, and understand visitors’ preferences. Information relating to traffic on the Website is accessible only to authorized personnel. We do not use any of this information to identify individual visitors, nor do we share it with third parties.

Social networks

You may click on the icons dedicated to social networks such as Twitter, Facebook, LinkedIn, etc., which appear on our Website.

Social networks help improve the user-friendliness of the Website and contribute to its promotion through sharing features. Video-sharing services make it possible to enhance our Website with video content and increase its visibility.

When you click on these buttons, we may have access to the personal information that you have marked as public and accessible via your profiles on the relevant social networks. However, we do not create or use any independent database separate from these social networks based on the personal information you may publish there, nor do we process any data relating to your private life through this means.

If you do not wish us to have access to personal information published in the public areas of your profiles or social network accounts, you must use the tools made available by the relevant social networks to limit access to such data.

Purposes for which we use personal data

We use your Personal Data in particular for the following purposes:

−to respond to your requests, such as requests for information, searches, newsletters, or other content;
−to provide you with the services and offerings ordered via the Website and/or in one of our establishments;
−to carry out surveys and statistical analyses;
−to personalize and improve your experience on our Website;
−to offer you promotions relating to our products and services and/or those of our partners;
−for any other purpose that may be specified to you, where applicable, at the time your data is collected.

Legal basis for the processing of personal data

We process your Personal Data in the context of the performance and management of our contractual relationship with you, our legitimate interest in improving the quality and operational excellence of the services we provide to you, and compliance with certain regulatory obligations.

Your Personal Data may also be processed on the basis of your prior consent where such consent is required in certain situations.

Disclosure of personal data

The security and confidentiality of your data are of great importance to us. For this reason, access to your Personal Data is restricted solely to members of our staff who need to know such data in order to process your request or provide you with the requested service.

We do not disclose your Personal Data to unauthorized third parties. However, we may share your data with entities within the SODEXO group and with authorized service providers (for example: technical service providers such as hosting and maintenance providers, consultants, etc.) that we use for the performance of our services. We do not authorize these service providers to use or disclose your data except as necessary to perform services on our behalf or to comply with legal obligations.In addition, we may disclose Personal Data relating to you (i).

if required to do so by law or legal process, (ii) in response to a request from public authorities or government officials, or (iii) if we believe such disclosure is necessary or appropriate to prevent physical harm or financial loss, or in connection with an investigation into suspected or actual unlawful activity.

Retention period of your personal data

Your Personal Data will be retained for a period no longer than is necessary for the purposes for which it is collected and processed, which period may be extended, where applicable, by the applicable statutory or regulatory limitation periods.

Sensitive personal data

As a general rule, we do not collect Sensitive Personal Data through our Website. “Sensitive Personal Data” refers to any information relating to racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health data, or data concerning a natural person’s sex life or sexual orientation. This definition also includes Personal Data relating to criminal convictions and offences.

If the collection of such data is strictly necessary for the purpose of the processing concerned, it will be carried out in accordance with the requirements of applicable local data protection legislation and, in particular, with your prior explicit consent and under the conditions described in this Privacy Policy.

Personal data and minors

The Website is intended for adults who are legally capable of entering into contractual obligations in accordance with the laws of the country in which you are located.

Any user who is a minor under the age of 16 or who lacks legal capacity must obtain the prior consent of their legal representative before entering their data on the Website.

The age of 16 may be lowered to 13 depending on the local legislation of your country of habitual residence.

Transfers of personal data

Due to the international nature of the SODEXO group, your Personal Data may be transferred to authorized internal or external recipients for the purpose of performing services on our behalf, who may be located in countries outside the European Union or the European Economic Area that do not offer an adequate level of protection for Personal Data.

In order to ensure the security and confidentiality of Personal Data thus transferred, we take all necessary measures to ensure that such data benefits from an adequate level of protection, such as the execution of the European Commission’s Standard Contractual Clauses or any other equivalent mechanism.

Your rights

In accordance with applicable law, you have certain rights relating to the processing of your Personal Data.

Right of access	You may request access to your Personal Data. You may also request the rectification of any Personal Data that is inaccurate or the completion of incomplete data. You also have the right to be informed of the source of your Personal Data.
Right to erasure	Your right to be forgotten entitles you to request the erasure of your Personal Data : (i) the data is no longer necessary for the purposes for which it was collected and processed; ; (ii) you choose to withdraw your consent (where consent was collected as the legal basis for processing), without affecting the lawfulness of the processing carried out prior to such withdrawal; (iii) you object to the processing of your data; (iv) your data has been unlawfully processed; (v) your data must be erased to comply with a legal obligation; or (vi) erasure is required to ensure compliance with applicable legislation.
Right to restriction of processing	You may request the restriction of the processing of your Personal Data : (i) ou contest the accuracy of such data ; (ii) we no longer need the data for processing purposes; and (iii) you have objected to the processing of the data.
Right to object to direct marketing communications	You may at any time request that you no longer receive advertising or direct marketing communications by contacting us directly and free of charge, or by using the unsubscribe link included in any marketing communication we may send you by email, or by sending an email to the address indicated below. This objection does not affect the lawfulness of communications sent prior to its implementation. In accordance with Article L.223-2 of the French Consumer Code, users are informed of their right to register free of charge with the telephone solicitation opt-out register (www.bloctel.gouv.fr).
Right Not to be subject to a decision based solely on automated processing	You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
Right to Data Portability	You may request that we provide you with your Personal Data in a structured, commonly used, and machine-readable format, or that it be transmitted directly to another data controller , provided that : (i) the processing is based on your consent or on the performance of a contract with you; and (ii) the processing is carried out by automated means.
Right to define instructions regarding the processing of your personal data after your death	In accordance with French data protection law, you may define instructions regarding the exercise of your rights set out in this section after your death (in particular concerning the retention, erasure, and/or communication of your data), and you may designate a person responsible for exercising these rights.
Right to lodge a complaint with a supervisory authority	If you have any concerns or complaints regarding the protection of your Personal Data, you have the right to lodge a complaint with the French Data Protection Authority (Commission Nationale de l’Informatique et des Libertés – CNIL) via the following website : www.cnil.fr. However, we kindly request that you contact us first at the address indicated below so that we may process your request and seek an amicable solution.

To exercise your rights, you may contact us by writing to the following address: [Lenôtre SA, 40 rue Pierre Curie, 78370 Plaisir, France], specifying your last name, first name, and the purpose of your request.
We may ask you for additional information in order to verify your identity and to be able to process your request.

Security

We implement all appropriate technical and organizational measures to ensure the security and confidentiality of the processing of Personal Data.

In this respect, we take all necessary precautions, having regard to the nature of the Personal Data and the risks presented by the processing, in order to safeguard data security and, in particular, to prevent it from being altered, damaged, or accessed by unauthorized third parties (including physical protection of premises, authentication procedures with secure personal access via confidential usernames and passwords, logging of connections, encryption of certain data, etc.).

Customer relationship management databases

We use a database to manage and monitor our relationships with existing and potential customers. This database includes Personal Data relating to employees of our clients or other partners with whom we maintain a business relationship or with whom we seek to establish such a relationship.

Such data, used solely for these purposes, may include in particular: contact details (last name, first name, telephone number, email address, etc.), publicly available information, responses to targeted emails, and other information collected and recorded by our staff in the context of interactions with our clients and partners.

If you wish to be removed from our customer relationship management (CRM) databases, please contact our Customer Service department at the following address: service-clients@lenotre.fr.

Links to other websites

We may occasionally provide links to other websites for convenience and informational purposes. Most of these websites are operated by entities within the SODEXO group; however, some of them operate independently from our websites and are not under our control.

These third-party websites may have their own privacy notices or terms of use, which we strongly encourage you to review. We accept no responsibility for the content of such websites, for any products or services that may be offered on them, or for any other use thereof.

Updates to our privacy policy

This Privacy Policy shall enter into force as of 25 May 2018. We may update or amend this Privacy Policy as necessary. In such cases, any changes made will only become applicable after a period of thirty (30) business days following the date of such modification. We encourage you to review this page periodically in order to stay informed of any potential updates.

Description

If you have subscribed to certain services via our Website and no longer wish to receive emails in the future, please visit the unsubscribe page corresponding to the subscription to which you have subscribed.

How to contact us

If you have any questions or comments regarding this Privacy Policy, please feel free to contact us at the following address: dpo.oss.fr@sodexo.com, or contact our Group Data Protection Officer at the following address: dpo.group@sodexo.com.

Dernière mise à jour : 27 avril 2026.